Express Money Payment[.]apk

General

Target

Express Money Payment.apk
Size

31.0MB
MD5

d699bbafb0d9f61eacf4a22f3ed905d9
SHA1

cc8a2174bc6bdc909d53f1efa4ce8ab7dc03443b
SHA256

63762abb04feefce5254cc8703bc061be90f75a01074bb6885f6db0eeef48a0a
SHA512

ea3b0cdb0266f13082814a646100bc76b51e0c28765ab7480b3f463d82ff6a8d33fd9a0150034476403b8d7142a494cec4614ffc432326cab5fbe2252e448b98
SSDEEP

786432:Fm1jyZ80iHoHT4YZxi2bvlt4l/qQRNhhMfOzqhFWbhizzuigexx:Q1jIdookYLislt4l/n82ErqLexx

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 16 IoCs

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to discover and pair nearby Bluetooth devices.	android.permission.BLUETOOTH_SCAN
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT
Required to be able to advertise to nearby Bluetooth devices.	android.permission.BLUETOOTH_ADVERTISE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read audio files from external storage.	android.permission.READ_MEDIA_AUDIO

Files

Express Money Payment.apk
.apk android arch:x64 arch:x86 arch:arm arch:arm64

com.ExpressMoneyPayment

com.ExpressMoneyPayment.Splash

Activities

com.ExpressMoneyPayment.Splash

android.intent.action.MAIN

com.razorpay.CheckoutActivity

android.intent.action.MAIN

Permissions

android.permission.CAMERA
android.permission.READ_PHONE_STATE
android.permission.READ_PRIVILEGED_PHONE_STATE
com.google.android.providers.gsf.permission.READ_GSERVICES
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.CALL_PHONE
android.permission.ACCESS_WIFI_STATE
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.GET_ACCOUNTS
android.permission.USE_CREDENTIALS
android.permission.WAKE_LOCK
android.permission.VIBRATE
android.permission.READ_MEDIA_IMAGES
android.permission.READ_MEDIA_VIDEO
android.permission.POST_NOTIFICATIONS
android.permission.WRITE_EXTERNAL_STORAGE
com.shree.first.permission.C2D_MESSAGE
android.permission.BLUETOOTH_SCAN
android.permission.BLUETOOTH_CONNECT
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.BLUETOOTH_ADVERTISE
android.permission.WRITE_SETTINGS
android.permission.FOREGROUND_SERVICE
android.permission.READ_MEDIA_AUDIO
com.google.android.c2dm.permission.RECEIVE
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.ACCESS_NOTIFICATION_POLICY
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Receivers

com.razorpay.RzpTokenReceiver

rzp.device_token.share

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

com.android.vending.INSTALL_REFERRER

Services

com.ExpressMoneyPayment.MyFirebaseInstanceIDService

com.google.firebase.INSTANCE_ID_EVENT

com.ExpressMoneyPayment.MyFirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.tapits.ubercms_bc_sdk.MyFirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.tapits.ubercms_bc_sdk.MyFirebaseMessagingServiceTest

com.google.firebase.MESSAGING_EVENT

com.tapits.ubercms_bc_sdk.MyFirebaseInstanceIDService

com.google.firebase.INSTANCE_ID_EVENT

Android Permissions

Express Money Payment.apk

Permissions

android.permission.CAMERA

android.permission.READ_PHONE_STATE

android.permission.READ_PRIVILEGED_PHONE_STATE

com.google.android.providers.gsf.permission.READ_GSERVICES

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

android.permission.CALL_PHONE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.POST_NOTIFICATIONS

android.permission.WRITE_EXTERNAL_STORAGE

com.shree.first.permission.C2D_MESSAGE

android.permission.BLUETOOTH_SCAN

android.permission.BLUETOOTH_CONNECT

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.BLUETOOTH_ADVERTISE

android.permission.WRITE_SETTINGS

android.permission.FOREGROUND_SERVICE

android.permission.READ_MEDIA_AUDIO

com.google.android.c2dm.permission.RECEIVE

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.ACCESS_NOTIFICATION_POLICY

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Sharing

General

Malware Config

Signatures

Files

com.ExpressMoneyPayment

com.ExpressMoneyPayment.Splash

Activities

com.ExpressMoneyPayment.Splash

com.razorpay.CheckoutActivity

Permissions

Receivers

com.razorpay.RzpTokenReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver

Services

com.ExpressMoneyPayment.MyFirebaseInstanceIDService

com.ExpressMoneyPayment.MyFirebaseMessagingService

com.google.firebase.messaging.FirebaseMessagingService

com.tapits.ubercms_bc_sdk.MyFirebaseMessagingService

com.tapits.ubercms_bc_sdk.MyFirebaseMessagingServiceTest

com.tapits.ubercms_bc_sdk.MyFirebaseInstanceIDService

Android Permissions

Express Money Payment.apk